Source: https://pages.awscloud.com/rs/112-TZM-766/images/Adapting%20Security%20and%20Compliance%20Controls.pdf